642-618 試験問題を無料オンラインアクセス

Where in the Cisco ASA appliance CLI are Active/Active Failover configuration parameters configured?

• A.customer context
• B.admin context
• C.within each customer context and admin context
• D.system execution space
• E.within the system execution space and admin context

Which three types of class maps can be configured on the Cisco ASA appliance? (Choose three.)

• A.stack
• B.inspect
• C.regex
• D.control-plane
• E.management
• F.access-control

Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:


The Cisco ASA administration must enable the Cisco ASA to automatically drop suspicious botnet traffic. After the Cisco ASA administrator entered the initial configuration, the Cisco ASA is not automatically dropping the suspicious botnet traffic. What else must be enabled in order to make it work?

• A.Periodic download of the dynamic botnet database from Cisco.
• B.DNS snooping
• C.Manual botnet black and white lists.
• D.DNS inspection in the global policy.
• E.Botnet traffic filtering on atleast one of the Cisco ASA interface.

What is the first configuration step when using Cisco ASDM to configure a new Layer 3/4 inspection policy on the Cisco ASA?

• A.Disable the default global inspection policy.
• B.Create the ACLs to be referenced by any of the new class maps.
• C.Create a new service policy rule.
• D.Create a new class map.
• E.Create a new firewall access rule.
• F.Create a new policy map and apply actions to the traffic classes.

With Cisco ASA active/standby failover, what is needed to enable subsecond failover?

• A.Enable the stateful failover interface between the primary and secondary Cisco ASA.
• B.Decrease the default number of monitored interfaces to 1.
• C.Use redundant interfaces.
• D.Decrease the default unit failover polltime to 300 msec and the unit failover holdtime to 900 msec.